$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft File: f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft (raw, json) Hash identifier: M6fk1E2LbT6WItF4lIQ9Cyu2exYGszue24Saavxc358= Subject key identifier: 99:22:C9:6E:8A:C8:59:B6:01:66:11:D6:95:0C:16:D6:2B:AE:63:52 Authority key identifier: 3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56 Certificate issuer: /CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800 Certificate serial: 010D0C9F4328584AF2CD5457DFD6291A9934AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft Manifest number: 010D0C9F4328584073A83F9E0D82482C6C3C1217 Signing time: Sat 23 Aug 2025 05:00:03 +0000 Manifest this update: Sat 23 Aug 2025 05:00:03 +0000 Manifest next update: Tue 26 Aug 2025 05:00:00 +0000 Files and hashes: 1: 18b84f34-8d20-3067-920f-c50b075a588e.roa (hash: Ao5fZkkK6YebPUZlJEQJZ5atC9QAIyR+jtHoDuqX+e8=) 2: f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl (hash: CGfsTjVLvnsV9q9tMsT1yuy3/nvJ4yTZLWhnay5Gsf8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:cd:54:57:df:d6:29:1a:99:34:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800 Validity Not Before: Aug 23 05:00:03 2025 GMT Not After : Aug 26 05:00:00 2025 GMT Subject: CN=9f33217e-af77-41f4-9e7d-bceed483f60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e2:ff:09:0a:27:2b:ab:45:35:30:81:86:33: a0:0f:a0:1d:48:f6:49:e0:76:f1:17:4c:dd:c0:77: ba:dd:09:78:b2:fa:cb:db:d6:b9:b5:2d:ae:f2:1d: 5b:66:f1:b0:cd:56:90:97:c0:0a:ac:7c:7e:56:bc: b3:07:0b:56:93:a9:c6:d2:8f:04:db:0e:89:cd:a4: fc:71:b6:7a:22:5a:e5:c5:aa:40:d6:79:68:c1:bd: 77:12:06:f7:13:92:b2:21:33:ff:e1:59:ba:6d:7c: 5b:cf:a8:f5:c3:f9:46:82:a3:bb:9c:1e:84:e1:32: f9:a8:bc:70:76:dd:57:33:06:05:ec:1a:67:85:37: fd:3b:9c:57:d0:e0:5c:9c:05:58:17:9b:ab:9b:33: 1f:d2:70:e9:ac:0a:02:f0:39:57:dd:4d:e4:97:ed: b7:30:3f:9e:c5:ff:7f:ab:62:43:5b:3d:e6:68:b5: 19:69:f0:45:7f:17:fd:87:1d:95:de:66:e3:0e:44: c5:6e:ff:5e:cf:e5:89:96:8f:10:f2:37:da:7b:c0: 11:2f:f5:cf:57:d7:79:4d:7b:6b:31:73:6a:5c:ed: 44:5f:2c:b3:c2:2d:df:21:70:49:29:39:39:55:1e: 12:20:e5:bd:c6:0f:2e:e2:a1:76:96:e3:ce:54:40: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:C9:6E:8A:C8:59:B6:01:66:11:D6:95:0C:16:D6:2B:AE:63:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl X509v3 Authority Key Identifier: keyid:3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7b:41:84:29:d6:ec:c8:9e:27:65:1b:a9:51:09:cb:58:e9: 5e:ad:3d:63:fa:7b:25:62:3b:2d:67:7c:31:7a:d2:dd:d6:ee: 5b:99:ee:af:47:70:1d:38:5b:29:9a:17:ef:56:f2:0c:90:fc: 1c:57:79:7e:71:8e:a6:e4:7d:d1:0b:d9:cd:18:c7:35:eb:14: 31:e8:a8:21:83:4a:02:b2:d2:35:e5:94:ff:2b:1b:f5:40:9e: ac:e9:43:75:c5:e9:91:c6:29:6c:64:df:8e:a3:49:28:4b:ba: f6:ea:58:7a:72:39:60:9f:7d:60:0a:ee:cf:7c:3b:f7:1b:12: 90:b0:aa:c9:cf:2c:71:48:eb:ab:f9:e1:83:d5:22:39:74:80: c5:db:6d:b1:39:0e:c4:28:09:28:5b:48:a0:70:9b:df:2b:f0: 12:09:d2:1c:a2:bc:ff:d4:8a:64:a5:d1:ae:9f:d1:54:d6:5e: 88:75:0b:ee:ba:eb:01:41:0f:8e:4d:dd:de:0a:04:42:39:14: 39:43:39:ec:49:6a:c6:6b:e2:7d:52:6f:7e:96:06:fb:fd:a0: 0b:2c:eb:e2:6e:e2:7b:72:a7:36:9d:05:33:28:27:d6:29:d5: 09:9f:a3:7f:c2:ae:e3:6b:07:51:0e:c2:40:1f:60:e2:c9:67: 25:5e:de:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryzVRX39YpGpk0rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNmZjVjZjMtMjMzMS00M2VkLWE1MDctMDlhM2Y1MmIy ODAwMB4XDTI1MDgyMzA1MDAwM1oXDTI1MDgyNjA1MDAwMFowLzEtMCsGA1UEAxMk OWYzMzIxN2UtYWY3Ny00MWY0LTllN2QtYmNlZWQ0ODNmNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eL/CQonK6tFNTCBhjOgD6AdSPZJ4HbxF0zd wHe63Ql4svrL29a5tS2u8h1bZvGwzVaQl8AKrHx+VryzBwtWk6nG0o8E2w6JzaT8 cbZ6IlrlxapA1nlowb13Egb3E5KyITP/4Vm6bXxbz6j1w/lGgqO7nB6E4TL5qLxw dt1XMwYF7BpnhTf9O5xX0OBcnAVYF5urmzMf0nDprAoC8DlX3U3kl+23MD+exf9/ q2JDWz3maLUZafBFfxf9hx2V3mbjDkTFbv9ez+WJlo8Q8jfae8ARL/XPV9d5TXtr MXNqXO1EXyyzwi3fIXBJKTk5VR4SIOW9xg8u4qF2luPOVECx8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJkiyW6KyFm2AWYR1pUMFtYrrmNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mM2Zm NWNmMy0yMzMxLTQzZWQtYTUwNy0wOWEzZjUyYjI4MDAvZjNmZjVjZjMtMjMzMS00 M2VkLWE1MDctMDlhM2Y1MmIyODAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjNmZjVjZjMtMjMzMS00M2VkLWE1 MDctMDlhM2Y1MmIyODAwL2YzZmY1Y2YzLTIzMzEtNDNlZC1hNTA3LTA5YTNmNTJi MjgwMC5jcmwwHwYDVR0jBBgwFoAUPbZtITn2s1vU4ibTAF3ejsm+NVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mM2ZmNWNmMy0yMzMxLTQzZWQtYTUwNy0wOWEz ZjUyYjI4MDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/e0GEKdbsyJ4nZRupUQnL WOlerT1j+nslYjstZ3wxetLd1u5bme6vR3AdOFspmhfvVvIMkPwcV3l+cY6m5H3R C9nNGMc16xQx6Kghg0oCstI15ZT/Kxv1QJ6s6UN1xemRxilsZN+Oo0koS7r26lh6 cjlgn31gCu7PfDv3GxKQsKrJzyxxSOur+eGD1SI5dIDF222xOQ7EKAkoW0igcJvf K/ASCdIcorz/1IpkpdGun9FU1l6IdQvuuusBQQ+OTd3eCgRCORQ5QznsSWrGa+J9 Um9+lgb7/aALLOvibuJ7cqc2nQUzKCfWKdUJn6N/wq7jawdRDsJAH2DiyWclXt4d -----END CERTIFICATE-----Generated at Sat Aug 23 23:41:20 2025 by rpki-client